Privacy Policy
Last updated: 2026
Introduction
Vincenzo.be SRL (“we”, “our”, “Bouncebuster”) operates the website https://bouncebuster.io and the related email verification service (the “Service”). This policy explains how we collect, use, and protect your information, including the email lists you submit for verification. We aim to collect as little as possible and to keep it secure.
Data we collect
You provide directly:
- Account information (name, email address, team details)
- Authentication credentials, used to sign you in (email sign-in links, and optionally a Google account if you choose to connect one)
- The email addresses you upload or send for verification, whether through the web app, the REST API, the CLI or the MCP server
- Billing information, processed by our payment provider
We collect automatically:
- Verification results and related metadata (status, reason, catch-all, disposable and role-based flags) generated when we check an address
- Technical metadata (IP address, browser type, pages visited, timestamps)
- Service usage data (credits consumed, API request volume, features used)
How verification works
To verify an address we check its syntax, look up the domain’s mail servers (MX) and open an SMTP conversation to ask whether the mailbox exists. We never send an email to the addresses you submit, and verification is invisible to their owners. Results we genuinely cannot resolve are marked “unknown” and are never charged.
How we use your data
- Provide and maintain the Service and return verification results
- Operate, secure and troubleshoot the Service
- Process payments and manage subscriptions
- Communicate with you (sign-in emails, support, invoices)
- Improve the product using aggregated, non-identifiable statistics
- Comply with our legal obligations
We do not sell your data or the lists you submit, and we do not use them to train third-party AI models.
Sub-processors
We rely on the following sub-processors to operate the Service:
| Sub-processor | Role | Location |
|---|---|---|
| Railway | Application hosting, PostgreSQL database and Redis | EU / US (region-dependent) |
| Stripe | Payment processing and subscription billing | US / EU |
| Postmark (Wildbit) | Transactional email delivery (sign-in links, receipts) | US |
| Cloudflare (R2) | File storage for uploaded lists and result exports, CDN and DNS | EU jurisdiction |
| Hetzner | Verification probe servers that perform SMTP checks | EU |
| SmartBear (BugSnag) | Application error tracking | US |
Data retention
- Account and lists: retained while your account is active. You can delete lists from the dashboard at any time, and we delete account data within 30 days of account closure.
- Verification cache: results may be cached to speed up and reduce the cost of repeat checks.
- Technical logs: retained for 30 days, then purged.
- Invoices: retained for 7 years (Belgian accounting law).
Your rights (GDPR)
Depending on your location, you may access, correct, export, or delete your personal data at any time. To exercise these rights, email [email protected].
Security
All communications are encrypted in transit with TLS, and sensitive credentials are encrypted at rest. Access to code and infrastructure is restricted to a small set of administrators.
Minors
Bouncebuster is a professional tool. The Service is not intended for people under the age of 16.
Changes
We will notify you by email at least 30 days before any significant change to this policy takes effect.
Contact
Vincenzo.be SRL · [email protected]